Method, device and electronic equipment for inputting dynamic link library documents
A dynamic link library and file technology, which is applied in program control devices, program control design, electrical digital data processing, etc., can solve problems such as inability to load dynamic link library files and easy interception.
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0068] figure 1 It is a schematic flowchart of a method for injecting a dynamic link library file into Embodiment 1 of the present invention, as shown in figure 1 As shown, the method of this embodiment may include:
[0069] Step 101, allocate a process according to the received dynamic link library file loading request, and call a loading module callback function that records the process;
[0070] In this embodiment, aiming at the technical problem that the existing DLL file injection is realized by calling the windows LoadLibrary function or the windowsCreateRemoteThread function to realize the DLL file loading, which is easily intercepted by some application programs, a new DLL file injection implemented at the windows kernel layer is provided and The loading method is used to solve the problem that the application program hooks the windows LoadLibrary function and the windowsCreateRemoteThread function.
[0071] In this embodiment, the operating system receives a dynamic...
Embodiment 2
[0095] Figure 4 It is a schematic flow chart of the method for injecting a dynamic link library file into the second embodiment of the present invention, such as Figure 4 As shown, the method of this embodiment may include:
[0096] Step 401, calling the image modification setting kernel function to register the loading module callback function.
[0097] In this embodiment, as an optional embodiment, the image modification setting kernel function is the PsSetLoadImageNotifyRoutine kernel function.
[0098] In this embodiment, the loading module callback function is called before the process loads the DLL file, and the loading module callback function is used to modify the general import table of the process. When the process starts, the information node of the newly added DLL file is written into the general import table, thereby Realize the injection and loading of specific DLL files.
[0099] Step 402, allocate a process according to the received dynamic link library fi...
Embodiment 3
[0107] Figure 5 It is a schematic flow chart of the method for injecting dynamic link library files into Embodiment 3 of the present invention, as shown in Figure 5 As shown, the method of this embodiment may include:
[0108] Step 501, allocate a process according to the received dynamic link library file loading request, and call a loading module callback function that records the process;
[0109] Step 502, analyzing the callback function of the loading module, and obtaining the general import table address according to the parameters of the callback function of the loading module;
[0110] Step 503, read the general import table corresponding to the address of the general import table, and extract the dynamic link library files not stored in the general import table from the dynamic link library files contained in the dynamic link library file loading request;
[0111] In this embodiment, the processes from step 501 to step 503 are respectively similar to steps 101 to ...
PUM
Abstract
Description
Claims
Application Information
- R&D Engineer
- R&D Manager
- IP Professional
- Industry Leading Data Capabilities
- Powerful AI technology
- Patent DNA Extraction
Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic, Popular Technical Reports.
© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap|About US| Contact US: help@patsnap.com